2757 matches found
CVE-2019-12724
An issue was discovered in the Teclib News plugin through 1.5.2 for GLPI. It allows a stored XSS attack via the $POST'name' parameter...
CVE-2019-13240
An issue was discovered in GLPI before 9.4.1. After a successful password reset by a user, it is possible to change that user's password again during the next 24 hours without any information except the associated email address...
CVE-2019-13240
GLPI before 9.4.1 has a password-reset flow flaw: after a user resets their password, an attacker could change that user’s password again within the next 24 hours using only the associated email address. This is addressed in GLPI 9.4.1 (released 2019-07-xx) per the linked references. Impact is li...
CVE-2019-12723
An issue was discovered in the Teclib Fields plugin through 1.9.2 for GLPI. it allows SQL Injection via containerid and oldorder parameters to ajax/reorder.php by an unauthenticated user...
CVE-2019-12723
An issue was discovered in the Teclib Fields plugin through 1.9.2 for GLPI. it allows SQL Injection via containerid and oldorder parameters to ajax/reorder.php by an unauthenticated user...
Sql injection
An issue was discovered in the Teclib Fields plugin through 1.9.2 for GLPI. it allows SQL Injection via containerid and oldorder parameters to ajax/reorder.php by an unauthenticated user...
CVE-2019-12723
An issue was discovered in the Teclib Fields plugin through 1.9.2 for GLPI. it allows SQL Injection via containerid and oldorder parameters to ajax/reorder.php by an unauthenticated user...
CVE-2019-12723
The CVE-2019-12723 entry concerns the Teclib Fields plugin for GLPI (affected version up to 1.9.2). The issue is a SQL Injection via container_id and old_order parameters to ajax/reorder.php that can be exploited by an unauthenticated user. Impact is described in the sources as high/critical (CVS...
GLPI Cross-Site Scripting Vulnerability (CNVD-2019-21438)
Teclib GLPI is an open source IT asset management suite from the French company Teclib. The suite includes features such as device status management, asset inventory storage, management processes and work log management. A cross-site scripting vulnerability exists in the inc/user.class.php file i...
CVE-2019-13239
inc/user.class.php in GLPI before 9.4.3 allows XSS via a user picture...
CVE-2019-13239
inc/user.class.php in GLPI before 9.4.3 allows XSS via a user picture...
CVE-2019-13239
inc/user.class.php in GLPI before 9.4.3 allows XSS via a user picture...
UBUNTU-CVE-2019-13239
inc/user.class.php in GLPI before 9.4.3 allows XSS via a user picture...
Cross site scripting
inc/user.class.php in GLPI before 9.4.3 allows XSS via a user picture...
CVE-2019-13239
inc/user.class.php in GLPI before 9.4.3 allows XSS via a user picture...
CVE-2019-13239
Vulnerability overview : GLPI
Fedora Update for glpi FEDORA-2019-169f1eec7c
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 29 Update: glpi-9.3.4-2.fc29
GLPI is the Information Resource-Manager with an additional Administration- Interface. You can use it to build up a database with an inventory for your company computer, software, printers.... It has enhanced functions to make the daily life for the administrators easier, like a job-tracking-syst...
Fedora 29 : glpi (2019-169f1eec7c)
Includes security fix backported from 9.4.3 - security Prevent execution of XSS on rich text, - security Prevent xss attack on user picture, Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to...
Fedora Update for glpi FEDORA-2019-2bad806189
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...